
What Is Claimed Is: 

\l . A data generating apparatus comprising: 

a^data- f or-main-checking memory unit for holding first 

\ 

data; 

a dat\- for- secondary -checking memory unit for holding 
second data; 

an encrypting key generation unit for generating an 
encrypting key fr^m data stored in the data- for- secondary- 
checking memory unity- and 

an encryptor for encrypting data stored in the data- 
f or-main-checking memorwunit with the encrypting key generated 
by the encrypting key generation unit, wherein 

data that includes aV least one of the result of 
encrypting by the encryptor and the data stored in the 
data- for- secondary- checking membry unit is generated. 

2. A data generating apparatus according to Claim 1, 
further comprising : 

a previous key memory unit for^holding a previous key, 
wherein the encrypting key generation uniuvalso uses the previous 
key stored in the previous key memory unr^ in generating an 
encrypting key , 

3. A data generating apparatus according to Claim 1, 
wherein the data stored in the data- for -main- checking memory 
unit is a result of decrypting prescribed encrypted data. 

4. A data generating apparatus according to Claim 1, 
wherein the data stored in the data- for -main- checkikg memory 
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unit\is a signature for prescribed data. 

,5. A data generating apparatus according to Claim 1, 
wherein Vhe encrypting key generation unit is composed of a 
one-way function, and a result of inputting the data stored in 
the data- for^ secondary- checking memory unit into the one-way 
function is tl^ encrypting key. 

6. A data^generating apparatus according to Claim 2, 
further comprising*^ 

a previous ke^\ encrypting key memory unit for holding 
a previous key encrypting key for encrypting the previous key; 
and \ 

a previous key encryp\or for encrypting the previous key 
with the previous key encrypting key stored in the previous key 
encrypting key memory unit. 

7. A data generating apparatus according to Claim 1, 
wherein the encrypting performed by\the encryptor is symmetric 
key encrypting. 

8. A data generating apparatus ^according to Claim 1, 
wherein the encrypting performed by the \encryptor is 
multiplication or division using the data\stored in the 
data- for -main- checking memory unit and the encrypting key 
generated by the encrypting key generation u\t under a 
prescribed modulus number. 

9. A data generating method comprising tbfe steps of 
generating an encrypting key from first datV; 
encrypting second data, capable of being checkeql whether 

it includes a prescribed characteristic, with the encrypting 
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key; \and 

generating data including at least one of the first data 
and the encrypted second data. 

lO.X^A data verifying apparatus comprising: 
a data\f or-main-checking memory unit for holding first 

data; 

a data- for\secondary- checking memory unit for holding 



V 

second data; \ 



a decrypting Icey generation unit for generating a 
decrypting key from da\a stored in the data- for- secondary - 
checking memory unit; 

a decryptor for decir>ypting data stored in the data- 
f or -main- checking memory unit\with the decrypting key generated 
by the decrypting key generat^n unit; and 

a check unit for checking V^ether the data decrypted by 
the decryptor has a prescribed characteristic. 

11. A data verifying apparatus according to Claim 10, 
further comprising : 

a previous key memory unit for holding a previous key, 
wherein the decrypting key generation unit, in generating a 
decrypting key, also uses the previous key storied in the previous 
key memory unit. 

.12. A data verifying apparatus according to Claim 10, 
wherein the check unit checks whether the data decrypted by the 
decryptor is a result of decrypting prescribed dat^a with a 
prescribed decrypting key. 

13. A data verifying apparatus according to C^aim 10, 



wherein the check unit checks whether the data decrypted by the 
decryp^or is a signature signed with a prescribed signature key. 

r4 . A data verifying apparatus according to Claim 10, 
wherein tfie decrypting key generation unit is composed of an 
one-way function, and a result of inputting the data stored in 
the data- for -siecondary- checking memory unit into the one-way 
function is theV decrypting key. 

15. A datas. verifying apparatus according to Claim 10, 
further comprising r 

a previous key\memory unit for storing an encrypted 
previous key ; 

a previous key decrypting key memory unit for storing 
a decrypting key for decrypting the encrypted previous key; and 

a previous key decryptor for decrypting the encrypted 
previous key stored in the previous key memory unit with the 
decrypting key stored in the previous key decrypting key memory 
unit . 

16. A data verifying apparatus according to Claim 10, 
wherein the decrypting performed by the decryptor is decrypting 
in symmetric key algorithm. 

17. A data verifying apparatus according to Claim 10, 
wherein the decrypting performed by the decryptor is 
multiplication or division using the data sVored in the 
data- for -main- checking memory unit and the decrypting key 
generated by the decrypting key generation unit^ under a 
prescribed modulus number. 

18. A data verifying method comprising th^. steps of 
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generating a decrypting key from first data; 
decrypting second data with the decrypting key; and 
checking whether a result of decrypting includes a 
prescribed icharacteris tic . 

19. A\data processing apparatus comprising a data 
generating appkratus and a data verifying apparatus for 
verifying the integrity of data generated by the generating 
apparatus , wherein^ 

\ 

the data verifying apparatus further comprises: 
a reference value memory unit for holding first data; 
a first data- f or\secondary- checking memory unit for 
holding second data; 

a decrypting key generation unit for generating a 
decrypting key from data storied in the first data-for- 
secondary- checking memory unitS^ 

a decryptor for decrypting the data sent from the data 

generating apparatus with the decrypting key generated by the 

\ 

decrypting key generation unit; and\ 

a verification unit for checking whether the data 

decrypted by the decryptor has a prescribed relationship with 

the first data stored in the reference value memory unit, and 
the data generating apparatus further comprises: 
a data- f or-main-checking generation unit for generating 

third data from the first data sent from the\data verifying 

apparatus ; 

a data -for- secondary- checking memory unit for holding 
fourth data; 
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an\ encrypting key generation unit for generating an 
encrypting^key from the data stored in the second data-for- 
secondary- checking memory unit; and 

\ 

an encryptor for encrypting the third data generated by 
the data- for -ms^in- checking generation unit with the encrypting 

\ 

key generated by\ the encrypting key generation unit, wherein 
the data verifying apparatus sends the first data stored 

in the reference va\Lue memory unit to the data generating 

apparatus; \^ 

the data generating apparatus generates the third data 

from the first data sent from the data verifying apparatus by 

\ 
\ 

the data-f or -main - checking generation unit, generates data by 
encrypting the third data\>y the encryptor, and further sends 
the generated data to the data verifying apparatus; and 

the data verifying apparatus decrypts with the decryptor 
the data sent from the data generating apparatus, and checks 
with the verification unit whetehr a result of decrypting has 
a prescribed relationship with the first data stored in the 
reference value memory unit. ^ 

20. A data processing apparatus according to Claim 19, 
wherein the third data generated by the dayta generating apparatus 
is a result of decrypting with a prescribed decrypting key the 
first data sent from the data verifying apparatus, and the 
verification unit of the data verifying apparatus checks whether 
the result of decrypting of data sent from th^ data generating 
apparatus is a result of decrypting the firsa data. 

21. A data processing apparatus according to Claim 19, 
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wlterein the third data generated by the data generating apparatus 
is ja signature generated by signing the first data sent from 
the data verifying apparatus with a prescribed signature key, 
and thev verification unit of the data verifying apparatus checks 



if a resuSlt of decrypting the data sent from the data generating 
apparatus i^a correct signature with respect to the first data. 

22. A v data processing apparatus according to Claim 19, 

wherein 

the data ^nerating apparatus further comprises 

a commitment random number memory unit for holding a 
random number; and 

a commitment generation unit for generating a commitment 
from the random number stored in the commitment random number 
memory uni t , and 

the data verifying apparatus further comprises: 

\ 

a commitment memory uni^t for storing the commitment sent 
from the data generating apparatus, and wherein 

the data generating apparatus sends, before it receives 
the first data from the data verifying apparatus, the commitment 
generated by the commitment generati\uni t to the data verifying 
apparatus , 

the data- for -main- checking generation unit, also uses 
a random number stored in the commitment random number memory 
unit for generating the third data to be vWified, and 

the data verifying apparatus, when itte check unit 
performs checking, also uses the commitment scored in the 
commitment memory unit, 
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23. A data processing apparatus according to Claim 19, 
whereiA the decrypting key generation unit of the data verifying 
apparatus is composed of an one-way function, a result of 
entering the data stored in the first data - for - secondary - 
checking memory unit into the one-way function is the decrypting 
key, the encrypting key generation unit of the data generating 
apparatus is composed of the same one-way function as that of 
the decrypting key generation unit of the data verifying 
apparatus, and a result of entering the data stored in the second 

\ 

data- for- secondary- qhecking memory unit into the one-way 
function is the encrypting key. 



24. A data processing apparatus according to Claim 19, 
wherein the data verfying^ apparatus further comprises: 

\ 

a first previous key\memory unit for holding a previous 
key, and \^ 

the decrypting key generation unit, when it is to generate 

the decrypting key, also uses \he previous key stored in the 

\ 

first previous key memory unit, and 

the data generating apparatus further comprises: 
a second previous key memory un\t for holding the previous 

key, and 

the encrypting key generation unit\ when it is to generate 
the encrypting key, also uses the previous key stored in the 
second previous key memory unit. 

25. A data processing apparatus according to Claim 24, 
wherein : 

the data generating apparatus further Comprises; 
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a previous key encrypting key memory unit for storing 
a previous key encrypting key for encrypting the previous key; 
and 

a\previous key encryptor for encrypting the previous key 
with an encrypting key stored in the previous key encrypting 
key memory \init, and 

the da^a verifying apparatus further comprises: 

a previous key decrypting key memory unit for storing 

\ 

a previous key decrypting key for decrypting the encrypted 
previous key; and\^ 

a previous ]ctey decryptor for decrypting the encrypted 
previous key with a previous key decrypting key stored in the 

previous key decrypting key memory unit, wherein 

\ 
\ 

the data generating apparatus encrypts the previous key 

\ 

stored in the second previous key memory unit with the previous 

\ 

key encryptor using the encrypting key stored in the previous 
key encrypting key memory unit\, and sends the result to the data 
verifying apparatus, and \^ 

the data verifying apparatus decrypts the encrypted 

previous key sent from the data generating apparatus with the 

\ 

previous key decryptor using the decrypting key stored in the 
previous key decrypting key memory uni\t, and stores the result 
in the first previous key memory unit, 

26. A data processing apparatus according to Claim 19, 

wherein 

the data verifying apparatus sends da6a held in the first 
data -for- secondary- checking memory unit to the data generating 
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apparatus, and 

the data generating apparatus stores the data sent from 
the d^ta verifying apparatus in the second data -for - 
secondary- checking memory unit for use in generation of the 
v 

encrypting key. 

27. \a data processing apparatus according to Claim 19, 
wherein \^ 

the data^generating apparatus sends the data held in the 

second da ta - for -^secondary - checking memory unit to the data 

\ 
\ 

verifying apparatus, and the data verifying apparatus stores 
the data sent from the data generating apparatus in the first 
data - for - secondary - cocking memory unit for use in generation 
of the decrypting key. 

28. A data processing apparatus according to Claim 19, 

wherein the encrypting performed by the encryptor is the 

\ 

encrypting using a symmetric\key algorithm with the encrypting 
key, and the decrypting performed by the decryptor is the 

decrypting using a symmetric ke^algori thm with the decrypting 

\ 

key . \ 

29. A data processing apparatus according to Claim 19, 
wherein the encrypting performed by\the encryptor is 
multiplication or division using the Khird data and the 
encrypting key under a prescribed modulus number, and the 
decrypting performed by the decryptor is \xiul tiplication or 
division using the data sent from the data generating apparatus 
by the decrypting key under the same modulus i\umber used in the 
encryptor . 
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0. A data processing apparatus comprising: 
a\f irst device comprising a first data memory means and 



an encrypting means; and 

a second device comprising a second data memory means, 
a decrypting mteans and a verifying means, wherein 

the f irst\levice encrypts prescribed data to be verified 
with the encrypting means on the basis of data stored in the 
first data memory meins, and the second device decrypts the 
encrypted prescribed dkta to be verified with the decrypting 
means on the basis of dataNstored in the second data memory means , 
verifies the integrity of^he result of decrypting with the 
verifying means, and, if the^data is successfully verified, 
authenticates the identity between the data stored in the first 
data memory means and the data stored in the second data memory 
means . 

31. A data processing apparatus according to Claim 30, 
wherein at least part of the data stored \n the first data memory 
means is data sent from the second devi< 

32. A data processing apparatus according to Claim 30, 
wherein at least part of the data stored in the second data memory 
means is data sent from the first device. 
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